The actions taken by senior management to specify the organization’s efforts and actions if an adverse event becomes an incident or disaster; includes incident response, disaster recovery, business continuity, and crisis management efforts, as well as preparatory business impact analysis.